2017 CAS-002 Exam Question Answer - CompTIA CAS-002 Dumps Exam Dumps4Download

1. CompTIA Advanced Security Practitioner (CASP) CAS-002 Exam Study Guide Get Full Exam Dumps PDF From: https://www.dumps4download.us/free-cas-002/comptia-question-answers.html

2. CompTIA Advanced Security Practitioner (CASP) CompTIA Advanced Security Practitioner (CASP) meets the growing demand for advanced IT security in the enterprise. Recommended for IT professionals with at least 5 years of experience, CASP certifies critical thinking and judgment across a broad spectrum of security disciplines and requires candidates to implement clear solutions in complex environments. Overview: The current landscape of cyber security requires specialized skills to troubleshoot via customized hacks and build solid solutions. Each hack is unique and must be combated with master-level security skills and experience. As a CASP-certified IT professional, you will demonstrate that you can provide the best cyber security solutions and protection for organizations worldwide.

3. Exam Details

4. Sample Question: 1 A government agency considers confidentiality to be of utmost importance and availability issues to be of least importance. Knowing this, which of the following correctly orders various vulnerabilities in the order of MOST important to LEAST important? A. Insecure direct object references, CSRF, Smurf B. Privilege escalation, Application DoS, Buffer overflow C. SQL injection, Resource exhaustion, Privilege escalation D. CSRF, Fault injection, Memory leaks Answer: A https://www.dumps4download.us/free-cas-002/comptia-question-answers.html

5. Sample Question: 2 A new piece of ransom ware got installed on a company’s backup server which encrypted the hard drives containing the OS and backup application configuration but did not affect the reduplication data hard drives. During the incident response, the company finds that all backup tapes for this server are also corrupt. Which of the following is the PRIMARY concern? A. Determining how to install HIPS across all server platforms to prevent future incidents B. Preventing the ransom ware from re-infecting the server upon restore C. Validating the integrity of the reduplicated data D. Restoring the data will be difficult without the application configuration Answer: D https://www.dumps4download.us/free-cas-002/comptia-question-answers.html

6. Sample Question: 3 The Chief Information Officer (CIO) is reviewing the IT centric BIA and RA documentation. The documentation shows that a single 24 hours downtime in a critical business function will cost the business $2.3 million. Additionally, the business unit which depends on the critical business function has determined that there is a high probability that a threat will materialize based on historical data. The CIO’s budget does not allow for full system hardware replacement in case of a catastrophic failure, nor does it allow for the purchase of additional compensating controls. Which of the following should the CIO recommend to the finance director to minimize financial loss? A. The company should mitigate the risk. B. The company should transfer the risk. C. The company should avoid the risk. D. The company should accept the risk. Answer: B https://www.dumps4download.us/free-cas-002/comptia-question-answers.html

7. Sample Question: 4 A network administrator with a company’s NSP has received a CERT alert for targeted adversarial behavior at the company. In addition to the company’s physical security, which of the following can the network administrator use to detect the presence of a malicious actor physically accessing the company’s network or information systems from within? (Select TWO). A. RAS B. Vulnerability scanner C. HTTP intercept D. HIDS E. Port scanner F. Protocol analyzer Answer: D,F https://www.dumps4download.us/free-cas-002/comptia-question-answers.html

8. Sample Question: 5 An administrator has enabled salting for users' passwords on a UNIX box. A penetration tester must attempt to retrieve password hashes. Which of the following files must the penetration tester use to eventually obtain passwords on the system? (Select TWO). A. /etc/passwd B. /etc/shadow C. /etc/security D. /etc/password E. /sbin/logon F. /bin/bash Answer: A,B https://www.dumps4download.us/free-cas-002/comptia-question-answers.html

9. CompTIA Advanced Security Practitioner (CASP) CAS-002 Exam Study Guide Get Full Exam Dumps PDF From: https://www.dumps4download.us/free-cas-002/comptia-question-answers.html